From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from phobos.denx.de (phobos.denx.de [85.214.62.61]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 4DC0CEB64D8 for ; Wed, 14 Jun 2023 16:54:58 +0000 (UTC) Received: from h2850616.stratoserver.net (localhost [IPv6:::1]) by phobos.denx.de (Postfix) with ESMTP id 974BC861A4; Wed, 14 Jun 2023 18:54:55 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=none dis=none) header.from=konsulko.com Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de Authentication-Results: phobos.denx.de; dkim=pass (1024-bit key; unprotected) header.d=konsulko.com header.i=@konsulko.com header.b="q8Dys3Ly"; dkim-atps=neutral Received: by phobos.denx.de (Postfix, from userid 109) id E2A5F861A4; Wed, 14 Jun 2023 18:54:53 +0200 (CEST) Received: from mail-yw1-x1129.google.com (mail-yw1-x1129.google.com [IPv6:2607:f8b0:4864:20::1129]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)) (No client certificate requested) by phobos.denx.de (Postfix) with ESMTPS id 86BF786119 for ; Wed, 14 Jun 2023 18:54:51 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=none dis=none) header.from=konsulko.com Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=trini@konsulko.com Received: by mail-yw1-x1129.google.com with SMTP id 00721157ae682-570284c7e61so588027b3.1 for ; Wed, 14 Jun 2023 09:54:51 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=konsulko.com; s=google; t=1686761690; x=1689353690; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=oIrmIuYc2/Ymbexs7TkYFB9aUIf1iNzSbf96t1UcP/U=; b=q8Dys3Lyfhj0q/pJQRxex8IuLdN5uIHrOF+xMLy6mDBBwWcKWQahEzW/DGenvOd2pV yP9v97vP8+Tk/vozUbWSZzv4C1DsW+QT6k5UP31LuNy8JTWb3Cy/vuWZjYyhKeflsCZJ B/T7Sh23b5nLhY+78b5LHmvGvVI5qdDUWmPzY= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1686761690; x=1689353690; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=oIrmIuYc2/Ymbexs7TkYFB9aUIf1iNzSbf96t1UcP/U=; b=Hj4KPx9oF8wLXiHczXl0kl+nTVAKu1s7+oq9ioaDSXJdXtBiBgENJ18YQSUPFqFqh5 BjP6fU67T9SGDYWXc5/YfsBH+SQal3Yf66rU09cIDPaGaj57qwPmyFs37kOgWRZ8RPRF Epyt9Iky/9vNwrO+lBhH6Ee9kufvDvxcOEdeWltY57rD7/YMIwJRe2d64LE/E0ETaHT+ a/0dUL7fLJjpRNQ3soZWXFXVjRl0TpLEjsrT6QAU+A/cT08mN7juXvCCgQ0DneN0SP3s 5rg3MA49kXxybGcT6NgJ1vdXZ43bwyDi2puNGNp1t4Eromo+D5G6eEnemU61b/j/M6ly Swyg== X-Gm-Message-State: AC+VfDwR1wXyjzOCFmDdqgQwsMiwpg12jZzAOknSqviGYiEwPOHWg673 1WSldVhXyCt8YGqm1KdKQEBBHicNoG1XrDmC4kPkkg== X-Google-Smtp-Source: ACHHUZ4O74uBiH3dN2+pm1m/Co9bOpj2kmrMK2VPJEpZc2LLPN5Vnu28LBSRBFXtOdOjY22o6SgpKg== X-Received: by 2002:a81:60d5:0:b0:561:b85e:8d9e with SMTP id u204-20020a8160d5000000b00561b85e8d9emr2425771ywb.15.1686761690258; Wed, 14 Jun 2023 09:54:50 -0700 (PDT) Received: from bill-the-cat (2603-6081-7b00-6400-8761-84b8-dc45-1ebe.res6.spectrum.com. [2603:6081:7b00:6400:8761:84b8:dc45:1ebe]) by smtp.gmail.com with ESMTPSA id k124-20020a816f82000000b00565b26a9c9csm3874132ywc.64.2023.06.14.09.54.49 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 14 Jun 2023 09:54:49 -0700 (PDT) Date: Wed, 14 Jun 2023 12:54:46 -0400 From: Tom Rini To: Peter Robinson Cc: u-boot@lists.denx.de, Joe Hershberger , Ramon Fried Subject: Re: [v1] disable NFS support by default Message-ID: <20230614165446.GQ3931582@bill-the-cat> References: <20230614144112.262795-1-pbrobinson@gmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="BqN68ZKBye+5QbXt" Content-Disposition: inline In-Reply-To: <20230614144112.262795-1-pbrobinson@gmail.com> X-Clacks-Overhead: GNU Terry Pratchett X-BeenThere: u-boot@lists.denx.de X-Mailman-Version: 2.1.39 Precedence: list List-Id: U-Boot discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: u-boot-bounces@lists.denx.de Sender: "U-Boot" X-Virus-Scanned: clamav-milter 0.103.8 at phobos.denx.de X-Virus-Status: Clean --BqN68ZKBye+5QbXt Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Jun 14, 2023 at 03:41:10PM +0100, Peter Robinson wrote: > While NFS is widely used in data centres, and private > networks it's quite a nuanced usecase for device firmware. > A lot of devices already disable it. >=20 > Various network protocols should really be opt in, not opt > out, because they add extra size and are potential attack > vectors from a security PoV. In the NFS case it doesn't > really make sense for a lot of devices like tables, SBCs etc. > It's also something we don't really want for SystemReady-IR > due to security concerns. >=20 > Signed-off-by: Peter Robinson Reviewed-by: Tom Rini --=20 Tom --BqN68ZKBye+5QbXt Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQGzBAABCgAdFiEEGjx/cOCPqxcHgJu/FHw5/5Y0tywFAmSJ8MwACgkQFHw5/5Y0 tyws2gv/XTyO94BewXIHa+rlNnOqU3LvpLGU/8RmR+gRYjau5g6j/MGa+lqW0Yje NuHY20ahjljxkdZLJOhbAO89XbfhXQkZjHJ2idUbv4uPvyDSQodyIGHA00ybcX3/ 6hUUmM6H7lFJ7TdwloZSoSYI3uTmLqepeLumWM0VOQgCtXBsH6XoOMRQV7YPT/Jv K+waiII9lii6OOjX8PB1KHV8Kssy3voU5ORBXmY0XQwCooWe3yxeK8kc0DbveFvX SuhL/VBnD98tuzd0i8y3FmNSWD7GZG6yTorhMhfw0FYAyBWuEgjPUY2qiGpzOMV4 1rU4Zof5cLDMcUX4AoxMS6GkcxomxhZQSUlRMj/y4FduhyoCVxz7FuykqE9fEYF0 i9/ZcvvL8DtXDqgxi2vN6B2rlM9P+TfVv5GoSatLUyvR24w66D+j3QD5mLfx92yt XDdbZM48faJzlleDOIdSNK/+vHFYbu26yHXPLZyovnMvwkG5rgGavxW/qxz764HT HMWt45TB =tCiN -----END PGP SIGNATURE----- --BqN68ZKBye+5QbXt--